Slashdot Mirror


Death Penalty For Hackers?

EMIce writes "The New York Times Op-Ed page has a piece entitled Worse Than Death (Obnoxious but free registration required) that calls for harsher 'hacker' penalties as a deterrent, quoting one academic as recommending even well, the death penalty - as a deterrent for the likes of Sasser author Sven Jaschan. Let's face it, businesses are becoming more dependent on their computers but they continue to be a point of failure, and subsequently, frustration through lost profits. Perpetrated breakdowns are now pushing that aggravation towards an edge. The author suggests commuting the idea of a death sentence into a lifetime of servitude doing viral cleanup. What role should enforcement play in such cases and is this too harsh, even considering the billions in damage that is sometimes caused?"

26 of 1,096 comments (clear)

  1. Companies Should Look Inside First by Rolan · · Score: 4, Insightful

    Companies are always quick to blame the 'hackers' when something bad happens. What they need to do is look inside first at themselves. Besides the fact that the vast majority of damage done to company computers is an inside job, most of the external damage (caused by worms and viruses, etc) is caused by people not patching vulnerable systems or having a poor network setup. The virus/worm writers certainly aren't innocent, but a lot of the companies are as guilty for not doing what they need to to defend against such attacks.

    --
    - AMW
    1. Re:Companies Should Look Inside First by ScentCone · · Score: 4, Insightful

      But if you leave your front door open you are partially to blame

      Why? In what way does leaving your front door unlocked cause someone to walk off the street and attempt to enter your home without an invitation?

      The person who breaks in is still ultimately responsible, but you have to take some basic responsibility.

      Well, which is it? The person who is "ultimately" responsible, as you put it, is THE person who is responsible. Ultimate, as in finally and completely. So, if you lock your door, but do it with an inexpensive lock, and the typical burgler just pushes through it... is that any different? The point is, the bad guy has to decide to take an action. If he doesn't decide to, then he doesn't wind up in your house. Period. And it's exactly the same with crackers and other malware.

      --
      Don't disappoint your bird dog. Go to the range.
  2. yes, kill hackers by hsmith · · Score: 5, Insightful

    Yes, lets kill hackers, but lets let more and more child molesters out of jail

    priorites people

  3. Won't help by Da+Fokka · · Score: 4, Insightful

    Except for the fact that the idea is horribly wrong from an ethical viewpoint, it also simply won't work. The efficacy of a punishment is more related to the chance of being caught than to the severity of the punishment.

    Despite the risk of huge fines, almost everyone downloads movies at a regular basis, because the chances of being caught are near zero.

  4. Re:So hacker gets death... by Skye16 · · Score: 5, Insightful

    Ahh, but the CEO is rich. Thus, it's okay. Therefore, teenagers get executed and old rich white men take a few billion dollars to support their pure-gold-toilet needs.

  5. I agree. The very idea of such a penalty is evil by ReformedExCon · · Score: 5, Insightful

    That punishment doesn't fit the crime. In many ways our justice system makes victims out of the perpetrators of crimes when the punishment is way out of proportion to the actual crime committed. When that happens, the justice system is perpetrating an injustice on the person found guilty in court.

    I don't like how some people think that just because someone is obnoxious or causes minor damage (and let's face it, virus infestations are fairly minor compared to the gamut of actual crimes that people are let off the hook with much less punishment) that they should be put away for ever or even put to death. I think it reeks of a completely blown sense of proportion. Unfortunately, the voters who think this way are more prone to vote than people who are more sanely-minded.

    Should the punishment for releasing a virus be tough? I don't think so. I think that it is a pretty benign "crime". It is crucial that we keep a sense of proportion when discussing the sentencing stage of justice.

    --
    Jesus saved me from my past. He can save you as well.
  6. Could someone please cite a published study? by Ieshan · · Score: 5, Insightful

    I'd appreciate it if any death penalty advocates could please cite a published work (in a reputable journal) which clearly shows statistical evidence that the death penalty actually acts as a deterrant in the mind of would-be criminals.

    As far as I can tell, it's just something that sounds really good. You know, "Criminals will be very scared of being killed for their actions, because normal people are very scared of being killed." From the little I know about the workings of the human mind, most sociopaths don't react to things the same way the rest of us do, and people who cause massive damage on an any scale - economic, physical, emotional - are sociopaths.

    Anyway, I'd just appreciate some good evidence for the "deterrant" hypothesis. Then I'll start to believe it might be a good idea.

    1. Re:Could someone please cite a published study? by 99BottlesOfBeerInMyF · · Score: 5, Insightful

      There is quite a bit of evidence to the contrary, actually. People who commit violent crimes are usually either desperate or are personality types (like many juveniles and other dissociative types) that do not consider that they might be caught in their actions. Increasingly harsh penalties does little to deter the latter and often motivates the former category towards more violence. Why not risk a shoot out with the police if you're going to die if you go peacefully? Why not shoot the witnesses?

      Practically there are two problems. First, most people don't understand the above and law-makers who support concepts the public does not understand are easy targets. Second, the issue is very emotionally charged and victims and people who empathize with victims are more interested in vengeance than doing what is best for society. Harsh punishments for other, especially nonviolent crimes (like illegal intoxicant laws), cause similar escalations of crime into violent crime. Personally, I don't believe in capital punishment. This is not because I have any problem with killing or any religious qualms. I simply have little faith in the accuracy of our legal system (which seems to be justified considering the number of people on death row who are later proven innocent). Our criminal justice system is not perfect, police are not perfect people, and legal representation is often very, very poor for those without a lot of money. I don't trust it nor do I see how anyone else can trust it especially with something as important as life and death.

  7. The death penalty is dubious as it is by Alioth · · Score: 5, Insightful

    As a kid, I used to think the death penalty was a great idea.

    At about age 16, we had a school debate on the subject. I was on the 'pro' death penalty side, but that debate sowed the inital small niggles of doubt.

    By the time I was 18, I realised the death penalty was completely barbaric. If just one innocent person is executed, that's tantamount to state sponsored murder. That's not to mention that capital punishment doesn't seem to deter crime anyway - Texas is executing more people than ever.

    One of the interesting things - if you have a debate with most pro-capital punishment people, they go awfully quiet when you ask them what would they do if they were falsely convicted of a capital crime. How would they feel as they were about to be gassed for a crime they didn't commit?

    I'm glad the EU outlaws capital punishment - it's a concept that should have disappeared in the 19th century. As Ghandi said - an eye for an eye and soon the whole world would be blind.

  8. Instead... by Greenisus · · Score: 4, Insightful

    Instead of "hacking" as a crime, perhaps the "hacker" should be charged with any crime that happens as a result. Break into a banking system, and it's fraud and possibly theft. Break into the 911 system and cause several people to die because they couldn't get help, and it's murder. Then, you don't have to make up new punishments and new laws and the punishment will be appropriate to the damage done.

    It just seems obvious to me. Am I missing something here?

  9. Re:Look, out, John... by DShard · · Score: 4, Insightful

    I see this as yet another fundemental misunderstanding of what security _is_ and how the proposed fix doesn't address the real problem in the least. As you correctly point out, admins and users are at fault here. The internet is a snapshot of society that has no boundaries. Anything that would happen in the real world will happen online. If purposeful defacement and destruction of property cannot be contained in the real world, nor will it online. Does the statement, "We should put to death people who create griffiti." even sound slightly rational?

  10. Re:Eeek! by bsgk · · Score: 4, Insightful

    Vengence shouldn't be a part of a court system. Your personal feelings (and mine if it happened to my child) shouldn't really be taken into account. That personal rage is not a solid foundation for justice.

  11. Re:Look, out, John... by A+beautiful+mind · · Score: 5, Insightful

    Someone who can stick a price on human life, or argument for improving the economy by killing people deserves no respect from me.

    This "journalist" did just that.

    The article is pure flamebait. I don't even start telling about the collective responsibility of software makers and the lazy sysadmins. The sasser worm was like a polite burglar: if it found the front door open, it went in. If it found it closed, it went away. Well, newsflash dear analysts: until you start paying attention to security there always will be a guy who writes a crappy virus (95% of them is _crude_) which wreaks havoc only because users and vendors like Microsoft of ignoring security.

    --
    It takes a man to suffer ignorance and smile
    Be yourself no matter what they say
  12. Re:So hacker gets death... by mwvdlee · · Score: 5, Insightful

    Kidnappers: We have a columnist held hostage.

    Negotiator: What are your demands?

    K: We want a million dollar.

    N: A million?

    K: Yes.

    N: Oh well, that's more than the value of a human life.

    (hangs up and orders troops to blow up building)

    N: (talking to collegue) And to think it was that very journalist who proposed the price, isn't it ironic?

    --
    Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
  13. Re:I agree. The very idea of such a penalty is evi by VernonNemitz · · Score: 5, Insightful

    If we punish with the death penalty those whose actions upset the lives of many many other people, and also cost lots and lots, then there is a long list of people who qualify. CEOs who rob pension funds, for example. Various politicians....

  14. Death Penalty for CEO's First by randall_burns · · Score: 5, Insightful

    What I dislike here is the double standard. Basically we have corporations _whining_ because they can't figure out how to hire the right folks to protect their networkers(or are too cheap to do so). On the other hand, we have CEO's of major corporations running places like Enron and Anderson that are essentially criminal organizations--and getting a complete slap on the wrist. Look at Ken Lay, the worldcom CEO, Milken. These folks all get the best justice money can buy-the type of service the average hacker just can't afford. The damage a crooked CEO can do at the helm of a major corporation makes what hackers do _pale_ by comparison. I don't see hackers leading the US into a pointless war in which thousands of young americans die or are permanently disabled to protect oil interests. I don't see hackers promoting products like thimerosal that may be causing permanent disability in children(or buying crooked politicians to get preferential legislation). I don't see hackers getting a corrupt president elected by vote fraud to refuse to enforce immigration law so corporations can make more money.

    If the corporate and governmental leaders want rule of law-they had better start by holding themselves accountable. Is is the corporate and governmental leaders that have created this state where the law is not taken seriously because they have exempted themselves from it.

  15. Re:I agree. The very idea of such a penalty is evi by lightsaber1 · · Score: 4, Insightful
    As benign as the crime may seem to you, it does cost billions of dollars to corporations. The death penalty is in no way acceptable -- that punishment doesn't even resemble something that fits the crime.

    On the other hand, it is conceivable that people may die as a result of a virus in hospitals, for example.

    To me, a virus release could range from a misdemeanor vandalism charge to possibly as high as manslaughter in the extreme case. The crime is serious, but you are right, some people do tend ot lose perspective. Perhaps a turn in the total perspective vortex would do some good.

  16. Re:Look, out, John... by sheldon · · Score: 4, Insightful

    Having a test server is a simple process.

    Knowing what all to test... that's the hard part.

  17. Re:They're felons, they have no rights. by Baorc · · Score: 4, Insightful
    The problem with your argument is you are saying that we shouldn't whine about any crime's consequence because we just shouldn't do it. Well this goes on a broader range, let's say I take your argument to another degree and say that all crimes should be punished with the death penalty. Do you see the flaw in your argument now?

    But one of the best arguments I have against all death penalty (including murder) would be in the case of the conviction of an innoncent person. This speaks for itself. To avoid killing one innoncent person is worth not having the death penaltly at all.

  18. Why Stop There? by NickFortune · · Score: 4, Insightful
    Death for virus writers. Whoo. Why'd no one think of this sooner?

    And we don't have to stop there. Let's do the spammers too. They are the ones who profit. And the DDOS cartels; death to them too.

    Lazy sysadmins who fail to patch their servers promptly: they're costing industry millions. They gotta die.

    Who else? Howabout billionaires who aggressivley market insecure operating systems? It's all their fault, after all. Sayonara, Billy-Boy,

    And as long as we're motivated by financial loss, let's have people who download illegal MP3 files. Get 'em up against the wall! Offering movies over BitTorrent? Off with yer head! Run Warez? Bye-bye! Say "Hi" to Bill for me...

    What else can we do? Employee sickness costs billions to industry. Let's have the death penalty for catching a cold! It doesn't just serve as an incentive - it improves the gene pool as well!

    How about criticsing the government? I'll bet millions are spent on spinning the facts every time some ungrateful fool goes and blows the whistle. Let's string 'em up today!

    Think you're clever writing open source software do you? you're costing illegal software monopolies money with every line code. Don't think you've escaped our notice.

    Oh, and let's include mindless trolls who write idiot stories for major newspapers, and the brain damaged editors who dignify such claptrap by printing it. Let's off them as well. I can't think of a good reason why, but in amidst all this bloodshed, who the hell's going to notice?

    +++ SARCASM OFF

    --
    Don't let THEM immanentize the Eschaton!
  19. Re:Obligatory BugMeNot Link: by xoboots · · Score: 4, Insightful

    Oh so the Death Penalty part is just a red-herring to attract attention? That's adds despicable on-top-of despicable. Off with their heads!

    Your assertion that we don't think critically about our own culture is rather unkind. Many of the people here seem to spend a lot of time thinking about the way modern super-companies have co-opted all areas of human endeaver -- to the detriment of the individual and society at large. Many also think hard about the role that they as individuals and technologists in general play in society.

    Political and corporate corruption is a much, much larger problem. Why not an article suggesting the death penalty for those offenders?

  20. Re:I agree. The very idea of such a penalty is evi by Cpt_Kirks · · Score: 5, Insightful

    You know, on a global scale, how we define "poor" and "poverty" is kind of silly.

    I have read that ~90% (seems high to me) of the world's population has never made a phone call. Probably a majority of people in the world have substandard food, water and shelter.

    Yet in the western world, we define "poverty" as not being able to afford broad-band, or only having one game console, or only having basic cable.

    Unless the parent(s)are total crack-heads, do any kids in the US REALLY go hungry? Call me a right wing fascist, but I find that hard to beleive. Food is cheap and plentiful here. You may not be able to afford steak, but most of the world lives on rice and beans, if they can get them.

    We are SO spoiled.

  21. Re:They're felons, they have no rights. by cool_number_9 · · Score: 5, Insightful
    might also comment on your view that the fact that a system could punitively execute someone for a crime they did not commit renderes all executions unacceptable is dangerous, because what is to stop folks from applying the same logic to lesser punishments? For instance, is it worth not having prisons to avoid imprisoning one innocent person?
    The thing is... while society cannot restitute the lost years of someone being innocently locked up in prison, it is possible to

    a) give the person back his/her freedom back and
    b) compensate this time-loss by other means, e.g. money.

    In case of the death-penalty there... welll, there is just no way to undo that, now is there? One could think of compensating the relatives, but that won't do any good for the poor sucker who's just been fried/injected/shot/hanged/eaten by ants.
  22. Re:They're felons, they have no rights. by 3terrabyte · · Score: 5, Insightful
    I disagree. Stealing a loaf of bread (so as not to die of starvation) amounts to cutting the theif's hands off in some countries. You like that idea?

    So what should hacking amount to? 7 years ago I was accused of hacking by a police officer because I told him I was programming on a Mud that was based in another state.

    Hacking could easily be described as anyone who logged into another server with someone else's login/password. (Logging into NYT's web page with bugmenot) Deserves the Death Penalty? I think not.

    So what DOES constitute a death-penalty hacking event? Something that causes a company 1 million dollars worth of lost profit? A life is worth that? Ok, how about 1 billion dollars, or a kazillion? Problem is, ****ALL**** companies, the RIAA, MPAA, and BSA have lied and and inflated their so-called losses by a gross amount. How can you put a life of a person in the hands of corporate greed?

    There are OTHER things that need to be fixed first. I don't see how a multi-criminal rapist would get an easier sentence than a kid who altered a VB script that was already out there. I don't see how this whole article could even be considered when the crooks at Enron get off without the death penalty first. Truth is, the author is just pissed off his computer crashed one day I'm sure.

    --

    Why are there only 19 people folding@home for slashdot?

  23. Re:Obligatory BugMeNot Link: by Stephan+Schulz · · Score: 4, Insightful
    He cites research claiming that deterring a mere 0.2% of hacking crimes would save society $100 million. That's huge. We might not like regulation, but if we can't police our own bad behavior, steps need to be taken. Money talks.
    It is not only huge, but also completely spurious. The economic benefit does not scale linearly. As long as there are a few aggressive viruses out there, you need to keep up the infrastructure to combat them. In fact, you would probably have to keep them up as a precaution just in case, or W32_Usamma will take out all modern infrastructure in 2008.

    Moreover, consider the "Crime". The hacker does nothing more than running a program on his computer. That it spreads is caused by broken systems and stupid users. Yes, cracking should carry an appropriate penalty. But the key word is appropriate. I'd say it ranks somewhere between illegal graffiti (if done just "for fun") and fraud (if done with a commercial motive).

    --

    Stephan

  24. Re:They're felons, they have no rights. by ShieldW0lf · · Score: 4, Insightful

    I have to somewhat agree with the ancestor posts in that when you commit crimes you are effectively saying that you don't want to adhere to the social contract established, so I don't believe a criminal is entitled to all the rights afforded to non-criminals.

    It's a social contract that has to be accepted by the majority to work. Think about it.

    You impose the death penalty for murderers. 0.01% of the population is now anti-social and has a vested interest in laying society low.

    You impose the death penalty for theft. 10% of the population is now anti-social and has a vested interest in laying society low.

    You impose the death penalty for copyright infringement. 90% of the population is now under threat of death for their normal living behavior and has a vested interest in laying society low.

    At this point, the majority of the people are now anti-social. Sometimes this means rebellion, sometimes it means subversion, but it eventually means the end of the society unless things change.

    The social contract is where we all agree that this is the way we want to behave and the way we want to live. If it ceases to be about wanting to comply and becomes something handed down from on high (like the current trend of corporate-bought laws) then it's time to burn the rulebooks and start fresh. Personally, I think we're going to see that time arrive before we die. You can see signs of it all over the place. People don't respect the system. Instead of being precious and treasured to them as it should be, it is generally resented, subverted and ignored. This is all in addition to an ever rising level of violence by the general populace, both against each other and against representatives of the system (terrorism anyone?).

    Figuring out the precise way to live and act that produces maximum economic productivity for the benefit of those who control the means of production and using the threat of law (which amounts to the threat of violence) to force everyone to comply is not the way to run a society, at least not in the long term. If it's harming the many for the benefit of a few, that is by its very nature anti-social. The way to run a society is to strip it down so that the laws reflect the way most people wish to live.

    Killing people who refuse to behave in a fashion that increases profits for businesses does not seem very social to me. As a matter of fact, it sounds a lot like the kind of slavery that lends moral justification to "Killing the Masters so we can be Free".

    Think about that the next time you lend your support to these fear-of-death type laws. Could be a day when you're the one in fear of your life because your lifestyle is no longer approved, or could even be a day when you're the one being slaughtered by those former-slaves-to-the-system you placed in that position with your support.

    Intolerance kills.

    --
    -1 Uncomfortable Truth